From: Phil Stracchino (no email)
Date: Wed Jan 01 2003 - 15:52:06 EST
On Wed, Jan 01, 2003 at 09:50:15AM -0600, Noel Jones wrote:
> On Wed, Jan 01, 2003 at 01:25:50AM -0500, Phil Stracchino wrote:
> >
> > What's happening is this: apparently-random mail messages cause the
> > cleanup daemon to apparently go into a tight loop and consume 100% of
> > CPU (on an Athlon XP 1800+). Only a very small fraction of incoming
> > messages cause this to happen. A zero-length file will appear under
>
>
> It's likely you have a broken regexp in either header or body checks.
> Poorly constructed expressions can cause a loop.
>
> Turn them both off to verify the problem goes away. Then
> turn them on one at a time to see which file the problem is in.
If this is the case, the log seems to imply the problem regexp is in my
spam_sites file, as dict_pcre_lookup: /etc/postfix/spam_sites is the
last action logged and the next filter file (spam_subject_OK) contains
only three trivial regexps. The vast majority of the regexps in
spam_sites are very straightforward, such as:
/^(to|cc|from|reply-to):.*\@.*chalomumbai\.com$/ REJECT
or
/^(to|cc|from|reply-to):.*momsgirl\@sprynet\.com/ REJECT
in fact, I think about the only two not-completely-trivial regexps in
the file are:
/^(to|cc|from|reply-to):.*\@(.*\.)*\d+\.com$/ REJECT
/^(to|cc|from|reply-to):.*\@.*[^o][^z]email\.com$/ REJECT
In short, I really don't think there's a single regexp in the file
complex enough to be suspect, particularly because virtually every
message that comes in gets checked against this file (and for that
matter, every PCRE filter file I use) and literally only about one or
two in a thousand runs into this problem. Nevertheless, I've copied a
tarball containing all the PCRE filter files, and an excerpt from
main.cf showing the order in which they are applied, to
http://www.latt.net/~phil/spam_sites if anyone cares to sanity-check it.
-- .********* Fight Back! It may not be just YOUR life at risk. *********. : phil stracchino : unix ronin : renaissance man : mystic zen biker geek : : : : : : 2000 CBR929RR, 1991 VFR750F3 (foully murdered), 1986 VF500F (sold) : : Linux Now! ...Because friends don't let friends use Microsoft. :
|
|
|